ENCRYPTED MESSAGE COMMUNICATION

• US 20170099268A1
• Filed: 10/01/2015
• Published: 04/06/2017
• Est. Priority Date: 10/01/2015
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Camenisch, Jan L., Lehmann, Anja, Neven, Gregory, Samelin, Kai
• Granted Patent: US 10,356,058 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

Computer-implemented methods are provided for communicating message data from a sender computer to a receiver computer via a network. The sender computer encrypts the message data in dependence on a cryptographic key to produce a ciphertext, and establishes an access password for the ciphertext with a host computer connected to the network. The sender computer sends the ciphertext via the network to the host computer, and sends an email, containing the cryptographic key in cleartext, to the receiver computer via the network. The cryptographic key comprises a random cryptographic value which is independent of the access password. The host computer receives the ciphertext from the sender computer and stores the ciphertext in association with the access password. The receiver computer receives the email from the sender computer and sends an access request for the ciphertext, and an input password, to the host computer via the network. The host computer, on receiving the access request and the input password, sends the ciphertext to the receiver computer via the network if the input password equals the access password. The receiver computer decrypts the received ciphertext using the cryptographic key to obtain the message data.

Claims

1. A computer-implemented method for communicating message data from a sender computer to a receiver computer via a network, the method comprising, at the sender computer:

encrypting the message data in dependence on a cryptographic key to produce a ciphertext;

establishing an access password for the ciphertext with a host computer connected to the network;

sending the ciphertext via the network to the host computer for storage in association with the access password by the host computer; and

sending an email, containing said cryptographic key in cleartext, to the receiver computer via the network;

wherein the cryptographic key comprises a random cryptographic value which is independent of the access password.

2. A method as claimed in claim 1 including, at the sender computer:

sending the access password to the host computer with the ciphertext;

receiving from the host computer a link to the stored ciphertext; and

sending the link to the receiver computer.

3. A method as claimed in claim 2 including sending said link to the receiver computer by sending an email, containing the link in cleartext, via the network.

4. A method as claimed in claim 3 including, at the sender computer, generating the cryptographic key as a unique key for the message data.

5. A method as claimed in claim 3 including, at the sender computer:

sending the ciphertext to the host computer via a secure communications channel established with the host computer; and

sending the email containing the cryptographic key to the receiver computer via a secure communications channel established with an email-provider computer connected to the network.

6. A method as claimed in claim 3 including, at the sender computer, producing the ciphertext by encrypting the message data using one of an authenticated encryption protocol and a non-malleable encryption protocol.

7. A method as claimed in claim 1 wherein said email is communicated between the sender computer and the receiver computer via an email-provider system connected to the network, and wherein the method includes, at the sender computer, sending the access password to the receiver computer via a communications channel which is independent of the email-provider system.

8. A method as claimed in claim 1 wherein said random cryptographic value is a strong cryptographic value.

9. A method as claimed in claim 1 wherein the cryptographic key is independent of the access password.

10. A computer-implemented method for communicating message data between a sender computer and a receiver computer via a network, the method comprising, at a host computer connected to the network:

receiving a ciphertext, encrypting the message data, from the sender computer via the network;

establishing an access password for the ciphertext with the sender computer;

storing the ciphertext in association with the access password;

receiving an access request for the ciphertext, and an input password, from the receiver computer via the network; and

sending the ciphertext via the network to the receiver computer if the input password equals the access password.

11. A method as claimed in claim 10 including, at the host computer:

receiving the access password from the sender computer with the ciphertext; and

sending a link to the stored ciphertext to the sender computer via the network.

12. A method as claimed in claim 11 including, at the host computer, implementing a throttling mechanism for access requests for the ciphertext in dependence on whether the input password equals the access password.

13. A computer-program product for communicating message data between a sender computer and a receiver computer via a network, the computer-program product comprising a computer-readable storage medium having program instructions embodied therein, the program instructions being executable by a host computer connected to the network to cause the host computer to perform a method as claimed in claim 12.

14. A computer-implemented method for receiving message data from a sender computer via a network, wherein the message data is encrypted, in dependence on a cryptographic key, in a ciphertext produced by the sender computer and the ciphertext is stored by a host computer connected to the network in association with an access password, the method comprising, at a receiver computer connected to the network:

receiving an email, containing said cryptographic key in cleartext, from the sender computer via the network;

sending an access request for the ciphertext, and the access password, to the host computer via the network;

receiving the ciphertext from the host computer via the network; and

decrypting the ciphertext using said cryptographic key to obtain said message data.

15. A method as claimed in claim 14 wherein said email is communicated between the sender computer and the receiver computer via an email-provider system connected to the network, and wherein the method includes, at the receiver computer, receiving said access password independently of said email-provider system.

16. A method as claimed in claim 14 including, at the receiver computer:

receiving from the sender computer a link to the stored ciphertext; and

in said access request, requesting access to the ciphertext via said link.

17. A method as claimed in claim 16 including receiving said link in cleartext in an email from the sender computer.

18. A computer-implemented method for communicating message data from a sender computer to a receiver computer via a network, the method comprising

at the sender computer:

encrypting the message data in dependence on a cryptographic key to produce a ciphertext;

establishing an access password for the ciphertext with a host computer connected to the network;

sending the ciphertext via the network to the host computer; and

sending an email, containing said cryptographic key in cleartext, to the receiver computer via the network;

wherein the cryptographic key comprises a random cryptographic value which is independent of the access password,

at the host computer, receiving the ciphertext from the sender computer and storing the ciphertext in association with the access password,

at the receiver computer, receiving said email from the sender computer and sending an access request for the ciphertext, and an input password, to the host computer via the network,

at the host computer, receiving said access request and the input password from the receiver computer and sending the ciphertext to the receiver computer via the network if the input password equals the access password, and

at the receiver computer, receiving the ciphertext from the host computer and decrypting the ciphertext using said cryptographic key to obtain said message data.

19. A method as claimed in claim 18 wherein said email is communicated between the sender computer and the receiver computer via an email-provider system connected to the network, and wherein the method includes, at the receiver computer, receiving said access password independently of said email-provider system.

20. A method as claimed in claim 18 including:

at the sender computer, sending the access password to the host computer with the ciphertext;

at the host computer, sending a link to the stored ciphertext to the sender computer via the network; and

at the sender computer, sending the link to the receiver computer.

21. A method as claimed in claim 20 including, at the sender computer, sending said link to the receiver computer by sending an email, containing the link in cleartext, via the network.

22. A method as claimed in claim 21 including, at the sender computer, generating the cryptographic key as a unique key for the message data.

23. A method as claimed in claim 22 including, at the host computer, implementing a throttling mechanism for access requests from the receiver computer in dependence on whether the input password equals the access password.